The vulnerability of the sdma_clean() function in the drivers/infiniband/hw/hfi1/sdma.c module of the Linux operating system’s kernel driver allows a malicious actor to cause a service failure.

The vulnerability of the sdmaclean function in the drivers/infiniband/hw/hfi1/sdma.c module of the Linux operating system’s InfiniBand support driver is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-23289

A flaw was found in the Linux kernel's IB/mthca component. A local user could exploit this vulnerability by triggering a system call failure path related to the mthcacreatesrq function. This oversight leads to a missed unmapping of user database resources, resulting in a resource leak...

CVE-2026-23289

In the Linux kernel, the following vulnerability has been resolved: IB/mthca: Add missed mthcaunmapuserdb for mthcacreatesrq Fix a user triggerable leak on the system call failure path...

CVE-2026-23289 IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()

In the Linux kernel, the following vulnerability has been resolved: IB/mthca: Add missed mthcaunmapuserdb for mthcacreatesrq Fix a user triggerable leak on the system call failure path...

The vulnerability of the nldev_stat_set_counter_dynamic_doit() function in the drivers/infiniband/core/nldev.c file of the Linux operating system’s kernel support for InfiniBand driver module allows a hacker to trigger a service failure.

The vulnerability of the nldevstatsetcounterdynamicdoit function in the drivers/infiniband/core/nldev.c file of the Linux operating system’s InfiniBand support driver module is related to a fixed-point overflow or cyclic shift. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the irdma_cm_teardown_connections() function in the drivers/infiniband/hw/irdma/cm.c file of the Linux kernel’s InfiniBand support driver allows a attacker to cause a service failure.

The vulnerability of the irdmacmteardownconnections function in the drivers/infiniband/hw/irdma/cm.c file of the Linux kernel’s InfiniBand support module is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the pass_establish() function in the drivers/infiniband/hw/cxgb4/cm.c module of the Linux kernel’s InfiniBand driver allows a attacker to cause a service failure.

The vulnerability of the passestablish function in the drivers/infiniband/hw/cxgb4/cm.c module of the Linux kernel driver for InfiniBand relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

USN-8116-1: Linux kernel (Intel IoTG Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - ATM...

The vulnerability of the mlx5_revoke_mr() function in the drivers/infiniband/hw/mlx5/mr.c file of the Linux kernel’s InfiniBand support driver allows a attacker to cause a service failure.

The vulnerability of the mlx5revokemr function in the drivers/infiniband/hw/mlx5/mr.c file of the Linux kernel’s InfiniBand support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: RDMA/rxe: Fix the qp flush warnings in req

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the qp flush warnings in req When the qp is in error state, the status of WQEs in the queue should be set to error. Or else the following will appear. 920.617269 WARNING: CPU: 1 PID: 21 at...

The vulnerability of the do_getHW_stats() function in the drivers/infiniband/hw/mlx5/counters.c module of the Linux operating system’s InfiniBand driver allows a hacker to cause a service failure.

The vulnerability of the dogetHWstats function in the drivers/infiniband/hw/mlx5/counters.c module of the Linux operating system’s InfiniBand driver is related to memory writing beyond the allowed buffer data size limits. Exploiting this vulnerability could allow a attacker to cause a service...

The vulnerabilities of the functions rxe_qp_init_misc() and rxe_qp_init_req() in the driver module drivers/infiniband/sw/rxe/rxe_qp.c of the Linux operating system’s InfiniBand driver allow a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions rxeqpinitmisc and rxeqpinitreq in the driver module drivers/infiniband/sw/rxe/rxeqp.c of the Linux operating system’s InfiniBand driver are related to improper initialization. Exploiting these vulnerabilities could allow an attacker to compromise the...

The vulnerability of the irdmaDestroy_cq() function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver for InfiniBand allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the irdmaDestroycq function in the drivers/infiniband/hw/irdma/verbs.c module of the Linux kernel’s InfiniBand driver is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the siw_proc_mpareply() function in the drivers/infiniband/sw/siw/siw_cm.c file of the Infiniband driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the siwprocmpareply function in the drivers/infiniband/sw/siw/siwcm.c module of the Infiniband driver for the Linux operating system is related to incorrect code handling of errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

USN-8096-1 linux, linux-aws, linux-gcp, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-xilinx-zynqmp vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8095-1 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

Unbreakable Enterprise kernel security update

6.12.0-109.67.6 - net: tunnel: make skbvlaninetprepare return drop reasons Menglong Dong Orabug: 39027305 6.12.0-109.67.5 - uek-rpm: fixed specs to explicitly call python3 as set as a requirement Mark Nicholson Orabug: 38933158 - Revert 'net/rds: fix crash by expanding kref coverage to...

The vulnerability of the hfi1_write_iter() function in the drivers/infiniband/hw/hfi1/file_ops.c file of the Linux operating system’s kernel driver allows a attacker to cause a service failure.

The vulnerability of the hfi1writeiter function in the drivers/infiniband/hw/hfi1/fileops.c file of the Linux kernel’s InfiniBand support driver is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rxe_srq_from_attr() function in the drivers/infiniband/sw/rxe/rxe_srq.c file of the Linux operating system’s kernel driver InfiniBand allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxesrqfromattr function in the drivers/infiniband/sw/rxe/rxesrq.c file of the Linux operating system’s InfiniBand driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the set_user_sq_size() function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setusersqsize function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...